Issue
After enabling HTTPS on Security Expert controllers and rebooting, HTTPS access does not work and the expected Public Key/Certificate is not generated. The HTTPS option may appear enabled, but the controller cannot be accessed using HTTPS.
Product Line
EcoStruxure Security Expert
Environment
- Security Expert
- SP-C controllers
- Single Record Download Service (SRDS)
Warning
Potential for Data Loss: Ensure all important data is backed up before proceeding.
Cause
The controller HTTPS configuration may not be retained when certificates do not match, when no certificate is loaded on the controller, or when the controller does not have a factory default certificate. A known issue may also prevent generation of a new certificate when SRDS has previously been connected to the controller using HTTPS.
Resolution
- Reinstall the HTTPS certificate on the controller by following the HTTPS certificate configuration procedure described in the AN 314 Security Expert - HTTPS Connection to the Security Expert Controller - Integration Guide application note.
- Factory default the controller to remove existing custom certificates and reload the factory certificate.
- Re-enable HTTPS and encrypt the controller again with HTTPS active.
- If the controller has previously been connected to Single Record Download Service (SRDS) using HTTPS, review the known certificate regeneration workaround documented in the AN-309 Single Record Downloads in Security Expert application note.
